Security Alert: Trojan detected on iPlay 50 Mini Pro / NFE

Hello everyone,

I am writing to report a serious security concern. Kaspersky has recently detected the Keenadu Trojan (an Android backdoor) pre-installed in the firmware of many iPlay 50 Mini Pro tablets.

Please read the full technical analysis here for more details: https://securelist.com/keenadu-android-backdoor/118913/

This is a critical vulnerability that puts user data at risk. In its current state, the device is unsafe to use for any sensitive activity.

I strongly urge Alldocube to take immediate action and provide a clean, official firmware update to remove this threat. We expect a prompt response regarding how the company plans to resolve this security breach.

UPDATE: See post #4 for more details and scan results.

I’m a iPlay 60 Mini  Pro user, and I also found the same Trojan scanning by Kaspersky Mobile Antivirus. Kaspersky’s report suggests this is present on all models. I’m not sure if it’s a Trojan created by Alldocube. Please provide a response to users as soon as possible.

Hello again everyone, I have an update on this.

You can check if your device is affected by performing a full scan with Dr.Web, which is available on the Play Store.

I am attaching a screenshot of my iPlay 50 Mini Pro showing the detection. I also ran a full scan on the 10-inch iPlay 50 Pro model and that one resulted clean.

 

Hi Ruggio :

Just to confirm — does Dr Web – Light version – able to do a full scan and check this virus?

 

Also, I have IPlay50 Pro (T1020).  I think you said that it seemed to fine, correct?

When you do the scan on the Pro version, what was the output?

 

Thanks a lot.

 

Hopefully, Alldocube be more responsible and do something.

This might be my last Chinese tablet.

 

Edit : I did a “full” scan with Dr Web (Light) —

at the end —

“Scan Completed”

326,084 objects scanned

0 threat detected.

Hopefully, I did this correctly.

 

One more note :  My Build number is : T1030M_V2.0_20230814

I think the date matter here.  Maybe we can get more information as people adding as much detail about their system when they report their “scan”.

I have an iPlay 70 Mini Ultra, and from what I can tell, it’s threat-free.

I ran…

– Dr. Web: 260443 objects scanned, 0 threats detected

– BitDefender showed no threats

– Avast Antivirus showed no threats

– Avira shows no threats

– Malwarebytes shows no threats

– Microsoft Defender shows no threats

If you know of something else to run, let me know.

Hi!

I performed the full scan using Dr.Web Light.

Regarding the tablet, the model I tested is actually the IPlay50 Pro NFE (T1030MAN). The scan output was clean with no threats detected.

Kaspersky found it on mine, Dr.Web Light didn’t.

Since Alldocube did not provide a response, I contacted Amazon support. They have authorized a return and a full refund.

 

Hi Punk0tek :

Could you please update your response with your model and number (T10xx).

 

Thanks